Which of the following tools is used by pen testers and analysts specifically to analyze links between data using
link analysis and graphs?A. Metasploit

While doing a technical assessment to determine network vulnerabilities, you used the TCP XMAS scan. What
would be the response of all open ports?

It is a widely used standard for message logging. It permits separation of the software that generates
messages, the system that stores them, and the software that reports and analyzes them. This protocol is
specifically designed for transporting event messages. Which of the following is being described?

While doing a Black box pen test via the TCP port (80), you noticed that the traffic gets blocked when you tried
to pass IRC traffic from a web enabled host. However, you also noticed that outbound HTTP traffic is being
allowed. What type of firewall is being utilized for the outbound traffic?

What kind of risk will remain even if all theoretically possible safety measures would be applied?

Backing up data is a security must. However, it also have certain level of risks when mishandled. Which of the
following is the greatest threat posed by backups?

The chance of a hard drive failure is known to be once every four years. The cost of a new hard drive is $500.
EF (Exposure Factor) is about 0.5. Calculate for the Annualized Loss Expectancy (ALE).

TCP/IP stack fingerprinting is the passive collection of configuration attributes from a remote device during
standard layer 4 network communications. Which of the following tools can be used for passive OS
fingerprinting?

A company recently hired your team of Ethical Hackers to test the security of their network systems. The
company wants to have the attack be as realistic as possible. They did not provide any information besides the
name of their company. What phase of security testing would your team jump in right away?

The practical realities facing organizations today make risk response strategies essential. Which of the
following is NOT one of the five basic responses to risk?